256 


User-Defined Data Types 


list„of_ lists case of y.tl 
NIL; joi»(cons(y.hd.car.y.hd.cdr),y.tl) 
join: join(merge(cons(y.hd.car,y.hd.cdr),hd(y.tl)), 
pair„merge(tl(y.tl)))) 

SIMPLIFIES TO: 

TRUE 

PROOF OF +5 RELATIVE TO THE ASSERTIONS: + 7 

The sample theorems proved in this paper are typical of the theorems which 
can be proved using our verifier with a reasonable amount of programmer 
guidance. Among the theorems we have proved using our verifier are: the total 
correctness of a program implementing a unification algorithm (assuming all 
variables have been renamed), the equivalence of an iterative algorithm (using a 
stack) and a simple recursive algorithm for counting the leaves of a binary tree, 
the total correctness of an extended version (including assignment) of the 
McCarthy-Painter compiler for arithmetic expressions [McCarthy and Painter 
1967], and the total correctness of a very simple set of data base management 
functions. 

FURTHER WORK 

At the moment, we are concentrating our research efforts in two areas: 

1) Extending our verification system to handle partial functions so that we can 
prove the correctness of a simple compiler. 

2) Enlarging the class of theorems the simplifier can automatically prove, without 
jeopardizing the verifier’s potential usefulness as a practical tool. 

Eventually we hope to extend TYPED LISP to include enough "impure" features 
such as assignment to make it a practical language for implementing real 
programs. 
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CONS SHOULD NOT EVALUATE ITS ARGUMENTS 

The constructor function which allocates and fills 
records in recursive, side-effect-free procedural 
languages is redefined to be a no n-i> tnlot (Vuille- 
min 1974) elementary operation. Instead of evalu¬ 
ating its arguments, it builds suspensions of them 
which are not coerced until the suspension is 
accessed by a strict elementary function. The 
resulting evaluation procedures are strictly more 
powerful than existing schemes for languages such 
as LISP. The main results are that Landin's streams 
are subsumed into McCarthy's LISP merely by the 
redefinition of elementary functions , that invoca¬ 
tions of LISP's evaluator can be minimized by' re¬ 
defining the elementary functions without redefining 
the interpreter, and as a strong conjecture, that 
redefining the elementary functions yields the 
least fixed-point semantics for McCarthy's evalua¬ 
tion scheme. This new insight into the role of 
constructor functions will do much to ease the in¬ 
terface between recursive programmers and iterative 
programmers, as well as the interface between 
programmers and data structure designers. 

INTRODUCTION 

It is common to perceive functional evaluation as 
requiring argument evaluation to be completed be¬ 
fore actual functional application begins. In com¬ 
puter programs, however, there has been considerable 
development of delayed argument evaluation through 
schemes such as call-by-name in ALGOL 60. Probably 
because of obsession with arithmetic examples , 
which are strict (that is , require all arguments in 
evaluated form), it has been commonly assumed that 
all elementary functions were strict. During the 
course of a project on compilation of pure recursive 
LISP 1.0 (McCarthy et al. 1962) source code into 
iterative object code, we have uncovered a critical 
class of elementary functions which probably should 
never be treated as strict: the functions which 
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allocate or construct data structures. 

We use the term aon-6 to refer to this class of 
functions and later to refer to a particular func¬ 
tion which allocates records of two fields. The 
term is common to several list processing languages 
(McCarthy et al. 1962; Burstall, Collins, and 
Popplestone 1971) which require that the arguments 
to con- 4 fix the values of the fields in the new 
record. This requirement is essential to our analy¬ 
sis because we assume a side-effect-free evaluation 
scheme in order to guarantee the integrity of envi¬ 
ronments which are passed subliminally about the 


It is our thesis that the fields of a newly allo¬ 
cated record can be filled with a structure repre¬ 
senting the suspended evaluation of the respective 
argument, instead of the value of that argument, as 
is done on systems with strict implementation of 
coni. If all other elementary functions are able 
to detect these suspensions and to force evaluation 
only at the time that the value is genuinely criti¬ 
cal to the course of the computation (necessary to 
the value of the main function), then the results 
are the same as those of a strict evaluation scheme 
whenever both converge. Convergence is more likely 
in the new scheme since potentially divergent yet 
immaterial argument evaluation can be avoided. In 
programming terms the scheme allows exponential im¬ 
provement in run times at the cost of linear degra¬ 
dation of the elementary system functions' times 
and of space overhead in dragging around environ¬ 
ments. We are interested in the insights provided 
for the recurs ion-compiler problem because the role 
of constructors is critical in the definition of 
the source language. 

Hoare (1975 ) has discussed the role of coni in 
building recursive data structures. The power of 
these structures is welcome because our restriction 
to purely recursive programs allows us no other 
kind. The language model we shall use is McCarthy's 
LISP, known in its basic form as LISP 1.0 or pure 
LISP. We owe a great deal to his definition and 
description of the language in terms of its own 
structures using only five elementary functions. 

The major results of this paper, in effect, have 
been implemented on his system with dramatic 
effects on his semantics resulting from simply 
changing three of these five functions. 

Landin approached the non-strict implementation 
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of coni in his discussion of streams (Landin 1965). 
He describes three elementary functions which accom¬ 
plish a coni strict in only one of its two parameter 
This version is satisfactory when the recursion 
pattern is peculiarly linear and when semantic 
improvements available from these structures 
within the interpreter can be ignored. 

The remainder of this paper is divided into five 
sections followed by conclusions. Section I is a 
brief introduction to LISP notation as interpreted 
in this paper. Section II presents definitions of 
the five elementary functions used for the defining 
language. They provide that coni does not evaluate 
its arguments, but delays them in a form detectable 
and coercible by two of the other four strict ele¬ 
mentary functions. Results in this section are 
proofs that McCarthy's interpreter built with these 
elementary functions is properly more powerful than 
it was as originally specified, and a strong conjec¬ 
ture that the new interpreter, in fact, gives the 
least fixed-point semantics for LISP. Section III 
presents a practical implementation for suspensions 
which prevents repeated coercion of the same sus¬ 
pension. This is accomplished by storing the ulti¬ 
mate value back into the node which ought to have 
contained it in the original interpretation scheme, 
replacing the suspension which led to it. 

Section IV relates Landin's streams to LISP as in¬ 
terpreted with the new coni . Streaming is shown to 
be less powerful by considering cases where evalua¬ 
tion should not follow a sequential pattern. An 
analogy between streams and sequential files is ex¬ 
tended to an analogy between suspensions and random 
access (overlapping tree structure) files which 
suggests that file handling may be implicit in pro¬ 
gramming style. In Section V we consider familiar 
functions whose arguments are to be selectively 
evaluated which have hitherto been implemented in 
LISP as special forms but now are expressible as 
ordinary functions. 


The five elementary functions presented 
will be called •' can., :cdn, tconi, • cq, 
These functions are redefined in two wa 
the interpretation of coni to postpone 
of its arguments. In both cases the fi 
ply called can., cdfi, coni, cq, and atom 
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redefinition is sufficient for the theoretical 
results in Section II and even Section IV, but are 
extremely inefficient. The versions of basic func¬ 
tions presented in Section III yield a system of 
equivalent power, but are more efficient and these 
definitions are used in both Section IV and Section 
V. 

The notation used throughout the paper for form 
invocation is the S-expression of McCarthy. The 
invocation (f a b c) asks that the function, f, be 
applied to the arguments a, b, and c. Usually this 
means that the values of the three actual parameters 
are to be bound to the three formal parameters 
in the interpretation of the body of f, but there 
are exceptions. If f were a special form (McCarthy 
1962), then the list of the three unevaluated 
arguments would be bound to the first actual 
parameter of f. If f were defined with a nontrivial 
atom as its formal parameter list, as discussed in 
Section V, then the list of the three values associ¬ 
ated with the arguments would be bound to that atom. 

A Zl&t is a sequence of zero or more atomic 
elements or lists. A list is also written using the 
parenthesis notation;whether the interpreter 
accesses it as an expression rather than as a value 
determines whether evaluation will occur. The empty 
list is denoted by the atom NIL*; the value of 
(:car z) is the first element on the list, z; the 
remainder of the list, z, exclusive of (:car z) is 
( : cdr z); (icons q z) gives the list which is the 
list z with the form q stuck on the front. 

A little of the record manipulation of LISP is 
needed for Section III. Atoms are references to 
distinguishable structures. The rest of the data 
structure is represented by references to records 
of two fields: the A- j \leZd and the D-field. New 
nodes are available through :con-i which places its 
two arguments in the A -field and V-fleld, respec¬ 
tively. The functions ■’ ean and '• edn extract the 
respective fields from a reference to a non-atomic 
structure. The predicate '.atom tests if its argu¬ 
ment is atomic, and the predicate. : eq tests if its 
two atomic arguments are the same. On non-atomic 
arguments •' eq is undef ined. 

*Symbol strings composed entirely of upper case 
letters are constants; that is, they evaluate %o 
themselves. LISP provides the function quote, for 
this role; only atoms may be quoted. 
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We have made a notational change in t 
of conditional expressions which needs t 
explained only to LISPers who have thus 
through this section. McCarthy's condit 
eond, requires its tail to be structured 
of lists of two elements which are often 
"cond-pairs." Rather than introduce the 
extra parentheses which make the pairing 
we use the commenting keywords If, then, 
and el-&e to group and to enhance legibil 
the interpreter we define eond to take i 
cates and selections unpaired as one Ion 
ting list. The reader who wishes to int 
invocation of eond literally should igno 
menting keywords. 

For example, we postulate the predica 
which is defined only in terms of : eq an 
exclusive of the other three elementary 
whose semantics are altered in this pape: 
(same sexp atm) E (eond 

If ( : atom sexp) then (:eq sexp a 

eJUe nil). 

This function is a convenient way of avo 
applications of : eq to non-atoms in the 
In many implementations : eq is a referen 
tor, which is sufficient for its semanti 
provides unnecessary comparisons on non- 
Even in McCarthy's Appendix B interprete: 
applied to (potential) non-atoms in a ma: 
we judiciously avoid with ACLme. 

II. ALLOCATING WITH INCOMPLETE CONTENTS 


Definition: A function is itnlet In ItA l '^ panam- 

eten if divergence of its i th argument implies the 
function diverges with that argument. 

Definition: A function is Atnlet (Vuillemin 1974) 

if it is strict in all of its parameters. 

A strict function may be evaluated by evaluating 
all of its arguments before its definition is 
interpreted. If it is strict in only a few' 
parameters then the corresponding arguments may be 
evaluated first. In an environment where all func¬ 
tions are strict, the behavior is like the call-by¬ 
value scheme of ALGOL 60.Vuillemin specifies that 
aZZ elementary (machine level) functions, except 
conditional expressions, are strict, although other 








262 


CONS Should Not Evaluate its Arguments 


functions need not be.. The foundation of our 
scheme is that we weaken this requirement. 

In recursive programming languages the role of 
the constructor function, here called C.OHA (McCarthy 
1963 ; Burstall , Collins and Popplestone 1971), is 
to allocate a new node from the available space 
pool and to fill its fields with its arguments. 
Languages with iterative control structures and 
assignment statements separate these two operations 
with sequential statements, allowing fields to be 
undefined while other operations intervene. In both 
protocols , the value returned by con-6 is a reference 
to the allocated node. 

VtlZnZZZont A jjo-tm is an unevaluated expression. 

V&l-inZtZon'- An tnoZn .0 nmtnt is a function which maps 
formal parameters to their values. 

Vt&ZnZZZon'- A iuiptniZon is a data structure, acces¬ 
sible only to the interpreter of a program, which 
is composed of a form and an environment for the 
form's eventual evaluation. 

A suspension provides enough information to eval¬ 
uate a form whenever its value is needed. This ob¬ 
tains because an environment is not subject to side- 
effects which could invalidate delayed evaluation. 
Several languages like LISP and SIMULA (Dahl and 
Nygaard 1966) allow the environment to be.accessible 
as a single data structure. By hiding the environ¬ 
ment in a data structure inaccessible to the user, 
we avoid such a situation. The function, iuiptnd, 
takes a form and an environment as arguments and 
creates a suspension from them. The auxilliary 
selector functions, (j on.m and tno , are defined over 
suspensions to return the respective fields. There 
is also a type predicate, iuipe.nd.td*. 

Our con-4 allocates a fresh node from available 
space and fills the appropriate fields with a 
suspension for each argument. This specification 
makes no assumption about the number of fields 
within a node , but assumes each field must be large 
enough to hold a reference to a suspension instead 
of the eventual value of the suspension. Our 
examples will presume a node of only two fields, 

*From these definitions, iuiptnd, ioHm, and tnv 
act very much like itoni, : tun. and •tdn.. The dif¬ 
ference is that the nodes created by iuiptnd and 
■toni are disjoint and clearly distinguished by 
iuiptndtd whose domain is the set of references 
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which is a model sufficient to represent a node of 
any size through the "naturally corresponding" list 
structure described for trees by Knuth (1975). Thi 
convention of suspending arguments for toni allows 
it to be non-strict yet never allows the contents o 
an allocated node to be undefined. The value re¬ 
turned by toni, as in the earlier protocols, is a 
reference to the newly allocated node. 

First Redefinition of the Primitives 

We present a reinterpretation of the elementary 
functions for LISP. The elementary predicates, at 
least, will not be confused because 


Coni is a Apecial form (McCarthy 1962) which takes 
two arguments that became a single list of two 
forms bound to its first formal parameter. Whatever 
environment exists at the time of invocation of 
toni is bound to the second formal parameter. We 
define toni through itoni: 

(scons arg env) = 

(icons (suspend (:car args ) env) 

(suspend (:car (:cdr args)) env)) . 
The selectors, tun. and tdn. always assume their argu¬ 
ment is a reference to a node allocated by :toni, 

■ and never yield a suspension as a result. 


(car q) = (eval (form (:car q))(env ' ( : car q))) 

(cdr q) = (eval (form (:cdr q))(env (:cdr q))) 

If the evaluation process traverses other suspen¬ 
sions, those other suspensions are only encountered 
within tun. and tdn. so evaluation continues. Eval¬ 
uation within those two functions, called to tn.td.on, 
terminates when an atom or an application of toni 
is encountered. 

Obitn.vutd.on 1: The structures built with itoni 
have the property that the nodes allocated by :toni 

only contain references to nodes allocated by iui¬ 

ptnd, and that the nodes allocated by iuiptnd con¬ 
tain only references to nodes allocated by : to ni or 


The evaluation scheme speci 
the same as the usual call-by- 
to that of ALGOL 60. There is 
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difference: not In when eoaluatlon oc.cu.tu, but 

In how an. evaluation ptiocccdi . When call-by-name 
forces evaluation on an actual use of a formal param¬ 
eter, it forces a complete evaluation because the 
ALGOL 60 model presumes that all elementary func¬ 
tions are strict, at least, in one parameter. In 
our LISP model with suspensions, coni is not strict 
in any argument, so evaluation stops at the first 
application of coni. As a result, the coercing of 
a suspension "bottoms out" much sooner than the 
forced evaluation of a similar parameter called-by- 
name. For example, if f, g, and h are functions and 
x, y, and z are arguments to these functions, then 
evaluation of 

(car (cons (cons (f x)(g y)) (h z))) 
does not cause evaluation of either (f x), (g y), or 
(h z). It returns a reference to 

(cons (f x) (g y )) 

after performing two storage allocations with '-coni 
and constructing four suspensions with iuipcnd. In 
the evaluation of 

(car (cons (f x) (cons (g y) (h z)))) 
the form 

(cons (g y) (h z)) 

is converted into a suspension instead of being 
evaluated, and since that suspension is not acces¬ 
sible to any permanent environment it will never be 
coerced. It, like the suspension for (h z) in the 
former example, is lost to the system garbage col¬ 
lector . 

We postulate a LISP evaluator for the side- 
effect-free language known as LISP 1.0 (McCarthy 
1962, Chapter one). The appendix presents an in¬ 
terpreter patterned after McCarthy's. The coal/ 
apply interpreter is the same interpreter using 
McCarthy's elementary functions. 

We present an example below which does not 
really fit th.e language LISP 1.0 because it uses, the 
data structure "number" and arithmetic. We use the 
example in later proofs about the coal/apply LISP 
1.0 system which depend on order of evaluation 
rather than on the properties of arithmetic. We 
choose to violate the data type of LISP 1.0 in order 
to present an example of a function which generates 
a familiar infinite sequence. All arithmetic 


functions are strict. 

Example '• The infinite sequence j-’ i,. . . ,— 2 , . . . 
can be expressed by (terms 1) where 

(terms n) = (cons(reciprocal(square n)) 

(terms(addl n))). 

This sequence has partial sums which converge to 
tt 2 /6, but that property is not critical to the 
following discussion. The important fact is that 
evaluation of (terms n) does not immediately diverge 
it results in a node referencing two suspensions. 

The interpretation of this value may, nevertheless, 
reflect its divergent behavior. An attempt 
to print it would diverge because the print routine 
traverses list structures using strict elementary 
functions in order to find printable atomic ele¬ 
ments. Other uses of (terms 1) do not reflect its 
potential divergence. For instance, extracting the 
third term in the sequence can be accomplished by 
the form 

(car (edr (edr (terms 1)))). 

The value 1/9 results from the construction of six 
suspensions during the allocation of three nodes , 
and tieclptiocal and iquanc are invoked only once 
during the coercion of one of those six suspensions. 
First Results 

The first results establish that McCarthy's LISP 
1.0 interpreter, here called : coal/:apply , is 
strictly less powerful than the same interpreter, 
called coal/apply , which interprets can., cdn., and 
coni as described above. The prototype interpreter, 
presented in the appendix, forms the basis for this 
argument under two interpretations: : coal/:apply 

is obtained by substituting ‘.can., :cdn., and ‘-iconi 
for all instances of can., cdti, and iconi in the 
coal/apply interpreter* We shall refer to a para¬ 
meter p of the former interpreter as :p to make the 
substitution appear more complete. 

There are several occurences of '• can., ‘.cdn., and 

:coni in the prototype code; these are not to be 
changed. They exist because the interpreter builds 
structures, argument lists and environments, and 
searches them. The use of :CO ni is required to 
build these structures, but the non-strict CO ni is 
only available through the interpreter at this time. 
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There is no choice but to use McCarthy's original 
functions for these purposes. In Theorem 3 we shall 
return to bootstrap the interpreter so that these 
occurrences of •" CO ni are also non-strict. 

Because the first three results rest on program- 
correctness arguments (Manna and Pnueli 1970), we 
must define three relations which will describe the 
behavior of the two interpreters for the three kinds 
of data structures used: values, argument lists, 
and environments. 

Pefitnttlo n: The relation "< " , read "coerces to 

value," is defined as follows: 

i) If (atom a) then a < v a ; 

ii) If (not (atom y)) and x < v y then both 

(car x) < y (:car y) and (cdr x) < v ( : cdr y) . 
V&hInltlon- The relation "< a " , read "coerces to 
arglist," is defined as follows: 

i) NIL < a NIL ; 

ii) If r < s and x < y then 

( : cons r x) < a ( :cons s y) . 

Veilnltlon: The relation "< e " > read "coerces to 

environment," is defined as follows: 

i) NIL < e NIL ; 

ii) If (atom a) , r < s , and x < g y then 
(icons (icons a r) x) < g (icons (icons a s) y). 

It is fortunate for testing the above relations 
that the predicates, atom and :atom, as well as eq 
and : eq , coincide. 

The first theorem says that whenever the :eval/ 
••apply interpreter converges then the eval/apply inte 
preter converges to a related value from related inpu 
Tke.oae.rn ?: If form < v :form and env < e :env 
then (eval form env) < v (:eval :form :env) 

Paoofi: The program-correctness induction proceeds 

on six invariantly true predicates: 

1. If form < :form and env < g :env then 


(:eval :form 
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2. If fn < :fn and args < 

env < e :env then (apply fn 
(:apply :fn :arg :env) ; 

3. If fpl < v :fpi and apl < 
env < e :env then (pairlis 
(:pairlis :fpl :apl :env) ; 

4. If (atom at) and env < :e 

e 

(assoc at env) < v (:assoc at 

5. If unargs lunargs and 
(evlis unargs env) < (:evli 


< v (:evcon :tail :env) 
and y < :y then 
: x) ; (cdr x) < ( : cdr 


The first two conclusions are trivial: vacuous 
when x is an atom and by definition of < otherwis 
In the last case (using Aeon* from the appendix) 
(scons x y) = (icons (icons (car x) y) 

(icons (car (cdr x)) y)) 
which is clearly not an atom. Moreover, 

(car (scons x y)) = (eval (car x) y) and 
(cdr (scons x y)) = (eval (car(cdr x)) y) . 


( icar ( iscons. 
(:cdr (iscons 


:y)) = (:eval (:car :x) :y) and 
:y)) = (:eval (icar (:cdr :x)):y). 


Because (car x) < v (icar :x) and (car(cdr x)) 

(:car(:cdr x)) by the first part of the lemma, a 
because of invariant Predicate 1 the result is 
established. □ 


Results like this lemma are easily obtained for 
the other relations , and similar results on atom 
and eq are available because these predicates are 
identical in both interpreters. The proof of 
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into a line-by-line analysi: 
We shall only present 
es: one from "eval" and one 

e in "eval." We want to 
rm and env < :env and 
(:atom (:car :form)) and 
then the following are all 


(not (atom form)); ( 
(eq (car form) CONS); 
(scons(cdr form)env) 


s ( : cdr : form ) : env). 


The proof is easy with the lemma. The first three 
fall from it and the definition of < v . They and 

the lemma applied twice give the last required 
result verifying Predicate 1 for this case. 

Finally, consider the CAR line in "apply." Assume 
that fn < v :fn , args < & :args , env- < g :env , 

(:atom :fn) , and (:eq :fn CAR) . From the defi¬ 
nition of < we have (:car args) < v (:car :args) 
and thence by the lemma (car (:car args)) < v 
(:car (:car :args)) establishing this case for 
Predicate 2. 

The remainder of the proof is tediously similar.! 
Tke.on.zm 2: McCarthy's evaluation scheme with our 
three elementary functions, zvall apply , can evaluate 
forms on which the unmodified evaluator, :zval/ 
••apply, diverges. 

Pnoofi: The example which appeared above will suf¬ 
fice: (car(cdr(cdr(terms 1)))) which extracts the 

third term from an infinite sequence. I 

Next we postulate a system for zval/apply boot¬ 
strapped upon itself so that the occurrences of 
:coni in the prototype interpreter in the appendix 
now create suspensions. We call this system the 
iupzn.lntzn.pn.ztzH. for reasons which will become 
apparent. In the resulting system there is only one 


rrors which normally 
val/-.apply . The first 


hampered by two kinds 
a function to diverge 
arises from the coni 
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in Zvlli . When this eon-6 is strict every actual 
parameter is evaluated; if it is an expression only 
involving strict operators, such as (quotient 1 0), 
then evaluation is complete and divergence implies 
that the form being evaluated diverges immediately 
(call-by-value). If, however, the coni in zvlli is 
the suspending kind, then argument evaluation is 
delayed until the result is accessed by the applica¬ 
tion of a strict elementary function to a formal 
parameter sometime later during the course of inter¬ 
pretation (call-by-name). All non-elementary func¬ 
tions are assumed to be strict in no parameters until 
then. 

Another error which can be avoided by the 
suspending coni (see palnlli) is that of insufficient 
arguments. (Palnlli builds the environment, binding 
formal and actual parameters.) The only way in 
which this error will be caught is, again , as a 
result of a strict elementary function being applied 
directly or indirectly to the formal parameter which 
is unbound because of the error. 

Tkzonzm 3’. The superinterpreter is properly more 
powerful than the interpreters of Theorem 1. 

Pnoofi: The equivalence of the interpreters when 

•• ZVall ’.apply or zval/apply converges is established 
through a proof much like that of Theorem 1 , but 
simpler because with only one coni there is only one 
"coerces to" relation for all structures. The fol¬ 
lowing example converges under the superinterpreter 
by escaping the pitfalls of argument evaluation and 
parameter binding by postponing the construction of 
its internal data structures. Define the function 
izcond as 

(second x y z) = y . 

The form , 

(second (quotient 1 0) 3) 

evaluates to 3 in spite of the strictly divergent 
first argument and the missing.third argument. I 
Example'. As an example of a form whose evaluation 
diverges in LISP 1.0, even under the superinterpre¬ 
ter , we offer 

((label gardenpath 

(A (x) (cdr (cons x (gardenpath x) )) ) 

) NIL) . 


the evaluation under 
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arguments to con-6 are suspended, but the second sus¬ 
pension is continually coerced by application of the 
strict elementary function zdfi. 

Rosen (1973) has established least fixed-point 
results for a nondeterministic version of LISP and 
Wand (1975) has established related results for 
Reynold's (1972) style interpreters. It is clear 
that our superinterpreter operates deterministically 
and that the evaluator never descends the evaluation 
tree any deeper than required by the strict elemen¬ 
tary functions within McCarthy's interpreter. As a 
result, it appears that the only weaknesses in 
Rosen's and Wand's proof can be avoided without 
changing the description of the interpreter in the 
appendix.* 

Stxong ZOnjZZtufLZ: The superinterpreter yields the 
least fixed-point semantics for McCarthy's izva.ll 
:appZy LISP 1.0 evaluator. 

Another approach to the conjecture may be based on 
the facts that the interpreter performs pure call-by¬ 
name (leftmost substitution rule) and that all elemen¬ 
tary functions are 'sequential' (Vuillemin 1974) as 
they are eventually coerced. In particular, an argu¬ 
ment to zon -6 is only coerced as if it were part of 
the form ( za.fl (con-6 . . . ) ) or [zdfi[zoni . . . ) each of 
which is sequential; the other elementary functions 
are strict. 

Henderson and Morris (1976) have independently 
discovered a "lazy" evaluation scheme for LISP which 
is presented with lucid examples and Scott-Strachey 
semantics. Their scheme is no less powerful than 
ours because they also provide a non-strict COn-6 . 

By the strong conjecture, then, their scheme is 
equivalent in power to ours. 

III. SUICIDAL SUSPENSIONS 

The scheme for implementing suspensions described in 
the previous section is terribly impractical for a 
running interpreter because a suspension is coerced 
again and again for every access to its value by a 
strict function. By Observation 1 a traversal of a 
data structure requires invocation of evaluation at 
every turn, and if the structure is traversed a 
second time , then the evaluations will all be 
repeated, just to get the same result (because 
suspended environments do not change). 

•«For another perspective, however, see deBakker 
(1975). 
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With the predicate, iiUpzndzd, defined over all 
references within the system, as described in the 
previous section, we can modify the definition of 
za.fi and zdfi to prevent any repeated coercions of the 
same suspension. After the evaluation of the first- 
coercion on a suspension the value is stored in 
place of the reference to the suspension. Future 
accesses which would have found and coerced the sus¬ 
pension are instead directed straight to the final 
value which is referenced in the same way, but is 
not suspended. 

In the last section we saw that changing the con-6 
used by the interpreter from strict to non-strict 
had the effect of changing all user functions from 
call-by-value to call-by-name. The introduction of 
the storing versions of za.fi and zdfc into the inter¬ 
preter has the effect of changing the call-by-name 
scheme into a call-by-delayed-value (Vuillemin 1974) 
scheme. Then no argument to any function will be 
evaluated until it is required by a strict elemen¬ 
tary function within the interpreter, and after that 
it will never be evaluated a second time. 

ObiZHvatlon 2: There is at most one reference to 
every suspension in the system. 

That reference is in the node allocated by the 
function :zon6 for which both invocations of 
AuApznd in the system are arguments. (We emphasize 
that the functions loftm, znv, Uiipznd, AuApzndzd, 
:za.fi, :zdfL, and :con6 are not available to the user, 
and that the interpreter only uses them to define 
the elementary functions za.fi, zdfi, and zon. 6.) 
Moreover, the only time this reference is accessed 
after its creation is during the evaluation of za.fi 
or zdfi of that node. 

Let fipZazZZba, be a function of two arguments 
defined similarly to HpZaza. of LISP 1(5 (McCarthy 
1962). The first argument is a node allocated by 
••con-6 and the second is a value of some sort. 
RpZazZZba per forms four steps : 

--Notes the reference in the A-{ZzZd of the node, 
N, which is the first argument; 

--Stores the reference to its second argument in 
the A -faZzZd of N; 

--Liberates (returns to available space) the 

single node whose reference was noted above; 

--Returns the value of the second argument as 
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Rpta.c.tx.bd is defined similarly for the V-^lcld. 
Rplacllba and fiplacllbd are not available to the 
user. In our applications the liberated node will 
always be a suspension and the replaced value will 
always be a reference to an atom or to a node origi¬ 
nally allocated by :c oni. 

Since coercions only occur within cafi and cdfi, it 
is those functions which we change in order to avoid 
repeating them. 

(car node) 8 (cond 

ti (suspended (:car node)) then 

(rplacliba node (eval (form ( : car node)) 
(env ( : car node)))) 

eli & ( : car node) ) ; 

(cdr node) §f (cond 

(suspended (:cdr node)) then 
(rplaclibd node (eval (form (:cdr node)) 
(env (:cdr node)))) 

eli e ( : cdr node ) ) . 

If the desired reference is to a suspension, it is 
coerced and the resulting reference is inserted in 
place of the original reference. The liberation is 
possible based on Observation 2 and the conditional 
test within each function. After replacement there 
is neither necessity nor ability to access the sus¬ 
pension. If the reference isn't to a suspension, 
then that replacement has already occurred and the 
value is directly accessible. 

The.OfLe.rn 4- Theorems 1, 2, and 3, and the strong 
conjecture apply as well to the interpreter using 
the definition of cafi and cdfi of this section. 

The proof is a trivial program-correctness argument 
outlined informally above. I 

Tke.Ofte.rn 5: Using the new functions C.a.fi and cdfi 
defined here , the number of calls to eval within the 
superinterpreter during the course of evaluating any 
form is less than or equal to the number of calls 
under McCarthy's :eval/:apply scheme. 

PfiOO{: Since the function :coni is strict under 

McCarthy's scheme, evaluation of its arguments 
always precedes its application. The only evalua¬ 
tions which are suspended in our scheme are precise¬ 
ly those resulting from applications of coni. The 
suspended arguments are eventually evaluated at most 
once, however. Since we accept his interpreter 
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(essentially) without change, the relation between 
the numbers of invocations of eval follows. I 

The interpreter which uses the new coni with 
suicidal ca.fi and cdfi is remarkably efficient. A 
coni allocates three new nodes instead of just one 
as in :evat/:apply, but avoids the (perhaps infinite 
time required to evaluate its arguments. Environ¬ 
ments tend to get dragged around the system, 
preserved from garbage collection by suspended refer 
ences, but argument evaluation is avoided until 
absolutely necessary and environment construction, 
itself, is suspended. On coercion of a suspension 
from within caft or cdfi the node carrying the suspen¬ 
sion is automatically released, and when all suspen¬ 
sions to a particular environment have been coerced, 
then that environment may finally be garbage col¬ 
lected.. The only ultimate storage cost results from 
suspensions which are never coerced. That space is 
always balanced by the time saved in not evaluating 
forms to useless arguments as indicated by Theorem 
5. We have, therefore, modified the system by 
increasing linearly the time required for three of 
the elementary functions at the expense of space 
required to carry around potentially unneeded envi¬ 
ronments. However, that storage cost enables us to 
save time by reducing potentially exponential 
computation time, and even potentially divergent 
computation, back to practical limits. 

IV. IMPLICATIONS FOR FILE STRUCTURE 

In this.section we consider the implications of 
suspensions on communication with external devices. 
The requirement that the environment of a conversa¬ 
tion be freezable as part of a suspension demands 
random access files in order to provide easy resto¬ 
ration of the device upon an unanticipated thaw. A 
useful model for the properties of sequential files 
may be found in Landin's concept of a stream (Landii 
1965 ; Burstall , Collins, and Popplestone 1971; 

Hewitt et al. 1974; Burge 1975). 

Landin describes a itfieam as a particular type oJ 
function which represents a sequence. A stream is 
applicable to an empty list of arguments and 
produces a pair whose first element is the next iten 
in the sequence and whose second element is a strean 
for the remainder of the sequence. This definition 
provides for a potentially infinite sequence using 
only strict functions by depending on the user to 
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control the expansion of a stream through explicit 
application of the successively generated streams. 

If we assume that the application of a stream is 
implicit in referring to it, then a stream may be 
viewed as the result of a coni strict in its first 
argument. In that view Landin's observation (1965) that 
streams "enable us to postpone the evaluation of the 
expressions specifying the items of a list until 
they are actually needed" is true only if 
lists are always processed from left to right with¬ 
out skipping any entries. This knowledge is avail¬ 
able in some circumstances in particular sequential 
input/output which Landin was prepared to model. 

The only operations which need be defined for a 
stream are these:* 

(hs s) = the first element of s; 

(ts s) S the stream representing all but (hs s); 
(prefixs x s) = the stream whose first element 
is the value of x and whose 
remainder is s; and 

(nulls s) = TRUE when the stream is empty, 

FALSE otherwise. 

Since streams cannot be arguments to any other ele¬ 
mentary function in the system, we can compare our 
system to the Landin system on the basis of these, 
operations. 

Tke.on.rn 5: McCarthy's LISP 1.0 with our elementary 
functions can model Landin's streams. 

Pn.00^: For every occurrence of (hs s) substitute 

(car s); for (ts s) substitute (cdr s); for (prefixs 
x s) substitute (cons x s); for (nulls s) substitute 
(same s NIL) in any program using Landin’s streams. 

The semantics are the same because the strict 
elementary functions e.a.H. and cdn. coerce suspensions 
planted by coni in the same way that Landin's hi and 
ti apply the function, s, to get the next pair. I 
Theorem 6 •• McCarthy's LISP 1.0 with our elementary 
functions can model more than Landin's streams. 

?n.00&: The result obtains because (prefixs x s) 

evaluates its first parameter completely. The two 
systems would be equivalent if we had defined coni 
to be strict in its first parameter. The example in 
Section II of the sequence of terms which sums to 

*In these definitions we have chosen the names 
from Burge (1975) rather than Landin (1965). 
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tt /6 offers a simple counterexample for Landin's 
streams. Consider the Boolean form 

(equal (car (cdr (terms 1))) 

(car (cdr (cdr (terms 0))))) . 

Our evaluation scheme returns the value TRUE because 
the two terms selected from the sequence are both 
1/4. Had we defined tcn.mi with Landin's function 
pfLCilxi as 

(terms n) = (prefixs(reciprocal(square n)) 

(terms (addl n)) ), 

then the form would diverge because of a division by 
zero. | 

For the remaining discussion on streams the func¬ 
tion pxc£ix.i is treated as coni except that it is 
strict in its first parameter. This makes it parti¬ 
cularly useful for describing sequential files. Let 
the function ficcd be defined as on many LISP sys¬ 
tems: KCCLd is a function of zero parameters which 

removes the next form from the input file and returns 
it as value. Then the function Input could be 
defined to identify the entire file without 
necessarily reading it: 

(input) = (prefixs (read) (input)) . 

If one were then careful to access the input file in 
order, one could then refer to (car (input)), the 
first form on input and (cdr (cdr (input))), the 
remainder of the file after the first two forms. The 
outer level interpreter "listening loop" for an 
interactive system might be written as one function, 
output whose value is passed to the printer: 

(output s) = (prefixs (eval (car s) NIL) 

(output (cdr s))) . 

The monitor invocation of (output (input)) runs the 
interpreter and results in an appropriate output 
stream. 

Consider the function input with coni substituted 
for ptie&ixi and a predicate cndoffiilc: 

(input') = (cond 

ii (endoffile) then NIL 

die (cons (read) (input')) ) . 

If we invoke the form (reverse (input')) our expec¬ 
tation would be that this invocation would reverse 
the forms taken from the input file. However, 
because Kcad is suspended until the results of 
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KeveKie are accessed, and because Kead is a side- 
effecting function, the eventual effect if the 
KeveKie is printed is to copy the input unchanged be¬ 
cause the first Kead forced still gets the first form 
from input. Thus (output(reverse(input'))) and (output 
(input')) transfers the input file to the output file 
essentially unchanged, but (output(reverse(input))) 
actually prints the reversal! The error is that the 
side-effects of Kead cannot be carried in the envi¬ 
ronments within the suspensions. If the value of 
(input') is taken to be a random-access file (as if 
it were a data structure within the machine) then 
the result would be the expected one. 

We argue that Landin's streams fit the requirement 
of sequential files. (See the dynamic. Hit of POP2 
(Burstall, Collins and Popplestone 1971).) Because 
pKefiixi is strict in its first argument it is impos¬ 
sible to access the remainder of the sequence without 
noticing the existence of the first element. On the 
other hand, the non-strict coni lends itself to 
manipulation of random-access (tree structured) files 
as an extension of the rest of memory: one can move 
across the tree at a high level without being 
bothered with details at inferior levels. 

In an extremely lucid discussion of streams , 

Burge (1975) develops the notion of a stream-function 
as a coroutine structure. With the suspension model 
of coni the same structure may be being traversed by 
several functions at once: when a suspension is 
coerced by one function, the value generated by the 
coersion is left behind in the place of the suspen¬ 
sion for others to find if they need it. One 
interesting effect of this interpretation is that 
coroutines are written without any conscious effort 
by the programmer. The parts of the structure which 
are actually evaluated, as opposed to those which 
remain suspended, and the order in which evaluation 
occurs are not easily predicted from outside the 
system. 

Our generalization of coni to non-strict is, 
therefore, a generalization of Landin's pKefiixi in 
the same way that, as Landin demonstrated, pKe^lxi 
is a generalization of the strict :coni. The 
difference is that the structures built with the non- 
strict coni can have the evaluation of the expres¬ 
sions specifying any part of the overlapping tree 
structure postponed until they are needed. 
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V. FUNCTIONS WHICH SELECTIVELY EVALUATE ARGUMENTS 
The use of the non-strict coni within the interpreter 
in a way which suspends argument evaluation until the 
parameter is used by a strict elementary function 
enables certain special forms (McCarthy 1962) to be 
treated as functions. In order to define some of 
these special forms , we allow a certain class of 
functions which take an arbitrary number of arguments. 
The definition of these functions will be flagged by 
exactly.one formal parameter directly following A 
which will be bound to the l-ist of (suspended) eval¬ 
uated arguments. For example, the function Hit can 
be defined as the function (A x x) so that if forced, 
it evaluates to the list of its (arbitrary number of) 
evaluated arguments. In order to facilitate writing 
recursions on lists of arguments we use a notation 
for applying a function to a list of arguments. The 
notation <f x> calls for an application of the func¬ 
tion, f, to the list of evaluated arguments which 
result from the evaluation of x. Thus, (f a b c) is 
synonomous with <f (list a b c)>, and in LISP 1.5 
(McCarthy 1962, Appendix B), <f x > means 
(apply (function f) x NIL). 

The logical connectives , and and OK, are defined 
in LISP to take an arbitrary number of arguments and 
to evaluate them from left to right. The first argu¬ 
ment which evalutes FALSE (respectively, TRUE) for 
the special form and ( OK ) terminates evaluation 
returning that value; if the argument list is 
exhausted then the value which results is TRUE 
( FALSE ). The explicit order of evaluation requires 
care in a system implemented with strict elementary 
functions, because these special forms are not strict 
in any parameter after the first argument which eval¬ 
uates to FALSE ( TRUE ). However, in the system 
which uses the non-strict coni internally, evaluation 
is automatically suspended so that and ( OK ) becomes 
a function yet its strictness property remains the 
same. 

and = (Ax (cond 

(same x NIL) then TRUE 
eliei{ (car x) then <and (edr x)> 
elie FALSE)) ; 
or I (A x (cond 

ii (same x NIL) then FALSE 
etieli (car x) then (car x) 
elie <or (edr x)> )) . 

The superinterpreter gives the correct results 
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with these definitions because the con-6 within evll6 
suspends evaluations. The pattern of the recursion 
with (cdr x) in and, ( OK ) would allow this program 
to work even if e\)ll6 were implemented with pKe&lx6 
in place of con6, because that cdK coerces a 
suspended evll6 only when the value of the caK is 
needed. 

The function, l£-then-el6e , requires the con6 
rather than the pKe£lx6 within evll6 because it does 
not necessarily access its arguments in order. 

Again, we treat l£-then-el6e as a function, rather 
than as a special form. 

(if-then-else p q r) = (cond 
l& P then q 
el6e r ) . 

By generalizing l£-then- el6 & we can write 
conditional = (A x (cond 
l£ (same x NIL) then NIL 
el6et£ (same (cdr x) NIL) then (car x) 
el6et£ (car x) then (car (cdr x)) 
el6e <conditional (cdr (cdr x))> )) . 

This c ondltlonal does not use the cond-patK6 of 
McCarthy's interpreter. Moreover, we could not write 
condtttonat as a function if it did. Instead, forms 
in odd-numbered argument positions (except the last) 
are treated as predicates, and the forms in the 
respectively following (even-numbered) positions are 
taken as the associated values. With this simpli¬ 
fication , the program is free from superfluous 
bracketings and the evaluator prepares for condition¬ 
al evaluation (which is suspended) by a normal invo¬ 
cation on evll6 . Only the odd-numbered arguments 
are actually evaluated until a non-NIL value is found. 

CONCLUSIONS 

The result of any mechanical evaluation scheme is 
usually passed as a final structure to some print 
routine which traverses it displaying the elementary 
parts as part of a picture of the answer. We have 
proposed an evaluation scheme in which the structure 
building function (constructor) is non-strict so that 
evaluation of its arguments is delayed until they are 
needed by the strict elementary functions. Therefore, 
the first evaluation of suspended arguments might be 
delayed until the traversal procedure within the 
print routine. If the only ultimate use of a result 
is to display it, then the only computations 
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necessary are those which directly contribute to 
value displayed. We have proposed a very simple 
scheme for accomplishing this behavior in a nice 
structured interpreter (LISP 1.0) simply by part 
tioning the five elementary functions into the s 
and the non-strict. 



We have implemented the elementary functions and 
the interpreter described in Section III, boot¬ 
strapping on an existing LISP implementation*. The 
appendix reflects an interpreter for our version of 
LISP; it appears very similar to McCarthy's. Signi¬ 
ficant differences in the behavior of the interpreter 
arise because the uses of C0n6 by the interpreter 
also cause suspensions. The use in evll6 suspends 
argument evaluation; the use in palKll6 suspends 
environment construction; the uses in apply, caKll6, 
and cdKll6 suspend construction of the multiple¬ 
valued structures which result from our operation of 
functional combination discussed elsewhere (Friedman 
and Wise 1976a, 1976b). All the resulting suspen¬ 
sions are coerced whenever they occur as arguments 
to the strict elementary functions. If McCarthy's 
evaluator is taken intact and interpreted with our 
elementary functions , the evaluation scheme becomes 
properly more powerful. We strongly conjecture that, 
in fact, this interpretation yields the least fixed- 
point semantics for his evaluator. 


In a previous paper (Friedman and Wise 1975) we 
propose the compilation of recursive programs into 
iterative machine code. The source code was to be 
restricted to a "stylized" language in order to 
assure the mechanical translation. That paper con¬ 
centrated on the peculiar role of con6 in a recur¬ 
sive program, which may be reinterpreted in light of 
the discussion herein. The result of a function 
which recursively builds a list using con6 , when run 
under the interpreter which we propose here , develops 
its answer in a top-down order as the suspensions are 
coerced in the traversal within pKlnt. The normal 


*It is noteworthy that the popular technique of 
implementing context-switching with "shallow bindings" 
and a push-down-list does not allow environments to 
be saved within suspensions, because suspensions are 
passed from nested environments out to enclosing 
environments. See Moses (1970) and Sandewall (1971) 
for further discussion of the problems with shallow 
binding schemes involving the role of function in 
LISP. 
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McCarthy's) builds the result bottom-up. 

iterative code is closer with the natural 
ion of bottom-up to top-down code readily 
rom our understanding of the role of 
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APPENDIX 

The appendix is in two sections. The first is a 
summary of the definitions of LISP's elementary 
functions as set forth in Sections II and III. 
Functions preceded by a colon (:) refer to 
McCarthy's five elementary functions. The second 
section is a prototype interpreter referenced in 


Elzme.nta.Ky function* ion. Station II pnooi* 

For the : eval/ : apply interpreter: 

(:scons :ab : env) = 

(icons ( : eval (rear :ab) :env) 

(:eval (:car(:cdr ab)) :env) ); 
( : car :x) = ( : car :x); 

(:edr :x) = (:cdr :x); 

( :eq . :x :y) = (:eq :x :y); 

(:atom :x) = (:atom :x). 

For the eval/apply interpreter: 

(scons ab env) = 

(icons (icons (car ab) env) 

(icons (car(cdr ab)) env) ); 


(car x) = (eval 

(:car(:car 

x)) 


(icdr(:car 

x)) ); 

(edr x) = (eval 

( : car( : edr 

x)) 


( : edr(:edr 

x)) ); 

(eq x y) = (:eq 

x y); 



(atom x) = (:atom x). 

Elzmznta/iy ianctioni ion. Section III'4 pnactical 
inten.pn.eten. 

(scons ab env) = 

(icons (suspend (car ab) env) 

(suspend (car(cdr ab)) env) ); 
(car x) S (cond 

ii (suspended ( : car x)) then 

(rplacliba x (eval (form(:car x)) 

(env(:car x)) )) 

eUe ( : car x) ) ; 

(edr x) = (cond 

ii (suspended (icdr x)) then 

(rplaelibd x (eval (form(icdr x)) 

(env(icdr x)) )) 

elie (icdr x) ); 

(eq x y) = (:eq x y) ; 

(atom x) = (:atom x) . 


FRIEDMAN, WISE 


283 


Phototype inten.pn.eten. fallowing McCanthy’i (1 962) 

The following interpreter serves two purposes in the 
paper. The proofs in Section II refer to the 
unbracketed lines with appropriate substitutions 
made for the uncoloned occurrences of the elementary 
functions. The bracketed lines provide for formal 
parameter structures suggested in Section V and for 
functional combination (Friedman and Wise 1976a, 
1976b). 

The function &ame, defined by 
(same sexp atm) = (cond 

ii (atom sexp) then (eq sexp atm) 

el&e nil) , 

is assumed to avoid misinterpretation due to undefined 
values of eq in apply. 

The phototype inten.pn.eten. [Bracketed lines are ignored 
in Section II.] 

(eval form env) E (cond 

ii (atom form) then (assoc form env) 
elt>eii (atom (car form)) then (cond 

ii (eq (car form) QUOTE) then (car(cdr form)) 
el&eii (eq (car form) CONS) then 
(scons (edr form) env) 
elieii (eq (car form) COND) then 
(evcon (edr form) env) 
el&e (apply (car fori)(evlis (edr form) 
env) env) ) 

eli>e (apply (car form)(evlis (edr form) env) 
env) ) 

(apply fn args env) E (cond 
ii (atom fn) then (cond 

ii (eq fn CAR) then (car(:car args)) 
elMeii (eq fn CDR) then (cdr(icar args)) 
elt> eii (eq fn EQ) then 

(eq (icar args)(:car(:edr args))) 
elieii (eq fn ATOM) then (atom (icar args)) 
el&eii (eq fn NIL) then NIL 
el&Z (apply (eval fn env) args env) ) 
elt>ei& (same (car f n) LAMBDA) then. 

(eval (car(cdr(cdr fn))) 

(pairlis (car(cdr fn)) args env)) 
elieii (same (car fn) LABEL) then 
(apply (car(edr(edr fn))) args 
(icons (icons (car(cdr fn)) 

(car(edr(edr fn) ) )) env)) 








CONS Should Not Evaluate its Arguments 


L&L-h&Li (anynull args) th&n NIL 3 
[&Z-&& (cons (apply (car f n) (carlis args) 
(apply (cdr fn) (cdrlis args) 

(pairlis fpl apl env) = (cond 
JL{ (atom fpl) th&n env 

&Zi& (:cons (icons (car fpl)(:car apl)) 

(pairlis (cdr fpl)(icdr apl) e: 

[(pairlis fpl apl env) = (cond 
Li (atom fpl) th&n (cond 

li (eq fpl NIL) th&n env 

&Zl>& (.icons (icons fpl apl) env)) 

&Zi>& (pairlis (car fpl)(icar apl) 

(pairlis (cdr fpl)(icdr apl) 

(assoc at env) = (cond 

Li (eq ( : car(:car env)) at) th&n (:cdr(:ca 
&Zi>& (assoc at ( : cdr env)) ) 

(evlis unargs env) = (cond 
■Li (atom unargs) th&n NIL 
&Zi>& (icons (eval (car unargs) env) 

(evlis (cdr unargs) env)) ) 

(evcon tail env) = (cond 
Li (atom tail) th&n NIL 
&Zi&Li (atom (cdr tail)) th&n 
(eval (car tail) env) 
tt&zLi (eval (car tail) env) th&n 
(eval (car(cdr tail))env) 

&Z-&& (evcon (cdr(cdr tail))env) ) 

[(anynull lis) 5 (cond 

Li (atom lis)- th&n FALSE 

&Zt> &L i (same (icar lis) NIL) th&n TRUE 

&Lt>& (anynull (icdr lis)) ) 3 

[(carlis mtx) = (cond 

Li (atom mtx) th&n NIL 
&Z&& (cons ( car ( : car mtx)) 

(carlis (icdr mtx))) ) ] 


iv) 

iv))]) 

)) ) 

nv)) ) 3 

env)) 



= (cond 
:x) th&n NIL 
(cdr( :car mtx)) 

(cdrlis (icdr mtx))) ) 3 


J. Gill 
I. Simon 


INK, DIRTY-TAPE TURING MACHINES, AND QUASICOMPLEXITY MEASURES 

Ink, the number of times a Turing machine writes on its work- 
tapes, is known not to be a Blum complexity measure for Turing 
machines with two or more worktapes. We introduce a more gen¬ 
eral computation model, the dirty-tape Turing machine, for 
which no assumption is made about the initial contents of the 
worktapes. We prove that for one-tape Turing machines, clean 
or dirty, ink is a complexity measure. For dirty-tape Turing 
machines with two or more worktapes, ink is not a complexity 
measure, but is an example of a quasicomplexity measure. 
Quasicomplexity measures, which properly include Blum measures, 
are shown to satisfy several properties of complexity theory, 
such as the speedup, compression, and gap theorems. 

1. INTRODUCTION 

One plausible measure of the cost of a Turing machine computa¬ 
tion is the number of times the machine writes on its worktapes. 
A machine is said to write on a worktape square only when it 
changes the contents of that square. We define the cost in 
ink of a halting computation to be the number of times during 
the computation that worktape squares are written on; by the 
usual convention, the ink cost of a nonhalting computation is 
defined to be infinite. 

It is well known, however, that ink is not a Blum complexity 
measure for Turing machines with two or more worktapes, because 

This research was supported by the National Science Foundation 
under Grant GK-43121 and by the Fundacao de Amparo a Pesquisa 
do Estado de Sao Paulo under Grant 72/425. 
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PREFACE 

This Third Colloquium on Automata, Languages and Programming 
takes place at a time when the technology for constructing 
information-processing systems has raced far ahead of our 
ability to theorise about the devices that we can, and do, 
construct. The need for theories adequate to guide the design 
and use of such systems grows more pressing every day. It is 
some comfort that the papers offered to the Programme Committee 
showed that the amount of good research in the Theory of 
Computation has increased since the last Colloquium, but every 
advance in technology raises more new questions than the 
theoretical advances have yet answered, and we look forward to 
future Programme Committees being overwhelmed by a flood of 
worthwhile papers. 

S.Michaelson 
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